This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1d46d8f8-c719-4c02-b405-b081542fed77.roa File: 1d46d8f8-c719-4c02-b405-b081542fed77.roa (raw, json) Hash identifier: ZLeE/HDyNzHTIHHYDC4jtNRvO9zUT6563p/l8aCaI5Y= Subject key identifier: 39:B9:E4:9B:5B:34:23:B1:32:51:0C:1F:AB:EC:81:3F:A0:14:3C:C1 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 48F25B35B483246E1DA6267035CB12B9B466A456 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1d46d8f8-c719-4c02-b405-b081542fed77.roa Signing time: Tue 11 Nov 2025 01:40:18 +0000 ROA not before: Tue 11 Nov 2025 01:40:18 +0000 ROA not after: Tue 16 Dec 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1fff:8090::/48 maxlen: 48 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 48:f2:5b:35:b4:83:24:6e:1d:a6:26:70:35:cb:12:b9:b4:66:a4:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 11 01:40:18 2025 GMT Not After : Dec 16 23:59:59 2025 GMT Subject: serialNumber=633ce85c739bd27fd08e3ff633fa218dbea69170e32692f5d9f971d89103f295, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:bd:98:6c:b3:db:5c:06:28:7d:d1:d6:bf:b9: f5:6b:ca:31:d2:93:ea:d6:c4:6d:fa:4e:71:69:aa: d7:bc:00:3d:f1:4d:c2:4b:57:d0:a9:3e:7b:06:65: 38:c7:31:2c:9d:4f:d5:88:b7:00:a3:c7:66:72:ae: 66:6d:ae:71:2f:f0:ad:02:32:d9:f9:05:d2:f2:d3: 2e:a5:f1:a2:28:18:7d:83:66:dd:9f:2f:51:12:86: cc:bf:8a:c8:0a:10:4a:d7:f9:a8:fe:b1:3d:20:e9: 58:fc:1e:ff:72:bb:4e:cf:c3:fc:26:93:9b:b5:9b: 49:6a:a7:e0:f9:91:83:ff:4c:51:f2:7d:42:47:67: 00:cd:8c:37:d5:35:77:46:ae:55:bf:2e:e7:cb:a9: cf:e9:ba:1a:ee:1a:0e:ec:f4:35:19:36:84:5e:56: 69:35:81:0d:38:8e:0a:19:c4:ab:51:6e:4c:02:b4: b1:45:f2:8c:51:35:d7:62:ec:5e:8b:c9:02:35:74: 7a:23:69:0a:a6:5a:53:2b:75:47:a1:c9:ab:87:5a: f0:c7:22:e2:95:3b:fa:90:47:37:35:5c:79:7a:f2: 30:8f:4a:94:2d:fa:40:cf:8b:ad:58:29:b9:df:b4: 24:26:c6:a8:75:2b:dc:df:a5:e6:6f:bc:77:0f:9a: 0c:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:B9:E4:9B:5B:34:23:B1:32:51:0C:1F:AB:EC:81:3F:A0:14:3C:C1 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1d46d8f8-c719-4c02-b405-b081542fed77.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fff:8090::/48 Signature Algorithm: sha256WithRSAEncryption 0c:29:30:75:55:18:a5:d2:15:35:3d:6f:4d:d6:3e:fb:28:2c: de:c7:c3:46:13:12:ba:b6:19:3b:39:b6:6e:39:af:69:fb:02: 35:4a:f6:b0:cd:6d:ee:74:2b:c8:e4:a6:66:bf:4f:64:0a:f0: a9:ad:9e:49:f1:de:a3:89:6e:39:c6:43:76:39:be:18:62:38: 3d:1e:ff:c3:98:28:88:07:06:a9:4e:07:86:31:8f:53:98:9e: 61:55:5a:89:cf:d2:8a:f6:27:09:4c:24:9c:4b:7c:83:c0:48: f7:28:71:15:e1:d4:5a:57:a9:59:87:f5:78:87:f0:53:3f:b8: eb:fc:29:8a:cb:55:ba:a1:64:37:af:dd:f7:2f:e1:75:74:5c: be:d9:30:01:37:cc:75:ff:3a:d0:28:8c:26:bd:29:94:01:63: 99:62:69:f1:67:21:d0:4d:12:1e:0e:d6:fe:f3:4b:dc:1b:43: 17:fc:f9:f0:0c:52:7d:4c:13:da:2a:51:1e:52:bd:46:b7:e4: f3:74:d8:3f:fa:fc:b2:84:f2:1c:67:a8:d6:f2:d4:4b:14:19: 42:0d:49:ec:27:f5:eb:04:99:44:c1:6c:4a:2a:e0:a4:fe:3e: 9e:8d:a5:f7:2a:80:3e:49:a1:31:fd:91:57:c7:d9:e7:8d:61: d9:be:97:5a -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUSPJbNbSDJG4dpiZwNcsSubRmpFYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTExMDE0MDE4WhcNMjUxMjE2MjM1OTU5 WjB6MUkwRwYDVQQFE0A2MzNjZTg1YzczOWJkMjdmZDA4ZTNmZjYzM2ZhMjE4ZGJl YTY5MTcwZTMyNjkyZjVkOWY5NzFkODkxMDNmMjk1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCsvZhss9tcBih90da/ufVryjHSk+rWxG36TnFpqte8AD3x TcJLV9CpPnsGZTjHMSydT9WItwCjx2ZyrmZtrnEv8K0CMtn5BdLy0y6l8aIoGH2D Zt2fL1EShsy/isgKEErX+aj+sT0g6Vj8Hv9yu07Pw/wmk5u1m0lqp+D5kYP/TFHy fUJHZwDNjDfVNXdGrlW/LufLqc/puhruGg7s9DUZNoReVmk1gQ04jgoZxKtRbkwC tLFF8oxRNddi7F6LyQI1dHojaQqmWlMrdUehyauHWvDHIuKVO/qQRzc1XHl68jCP SpQt+kDPi61YKbnftCQmxqh1K9zfpeZvvHcPmgyDAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUObnkm1s0I7EyUQwfq+yBP6AUPMEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzFkNDZkOGY4LWM3MTktNGMwMi1iNDA1LWIwODE1NDJmZWQ3Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB//gJAwDQYJKoZIhvcNAQELBQADggEBAAwpMHVVGKXSFTU9b03WPvso LN7Hw0YTErq2GTs5tm45r2n7AjVK9rDNbe50K8jkpma/T2QK8Kmtnknx3qOJbjnG Q3Y5vhhiOD0e/8OYKIgHBqlOB4Yxj1OYnmFVWonP0or2JwlMJJxLfIPASPcocRXh 1FpXqVmH9XiH8FM/uOv8KYrLVbqhZDev3fcv4XV0XL7ZMAE3zHX/OtAojCa9KZQB Y5liafFnIdBNEh4O1v7zS9wbQxf8+fAMUn1ME9oqUR5SvUa35PN02D/6/LKE8hxn qNby1EsUGUINSewn9esEmUTBbEoq4KT+Pp6NpfcqgD5JoTH9kVfH2eeNYdm+l1o= -----END CERTIFICATE-----Generated at Sat Nov 22 21:32:12 2025 by rpki-client